Radar de estafas
El phishing sigue siendo el primer vector de fraude en Europa. Esta página recopila los casos confirmados por los CSIRT nacionales y las fuerzas del orden, además de los patrones que Mythos ha identificado en los mensajes enviados por los usuarios.
Email o SMS de 'Amazon' informa que el cobro de Prime ha fallado y la cuenta sera suspendida en 24h. Link a amazon-prime-renovar.es (real: amazon.es). Roba credenciales Amazon, tarjeta de credito...
Campana INCIBE-2026-165: email/SMS suplanta a Mi Carpeta Ciudadana (portal de la Administracion) anunciando un ingreso pendiente de 552,97 EUR. Enlace a clon que pide DNI, numero de cuenta y claves...
Correo electronico simula a la Tesoreria General de la Seguridad Social (TGSS) advirtiendo que la prestacion (paro, IMV, jubilacion) sera suspendida si no se actualizan los datos. Enlace a...
Email o SMS suplanta a la DGT (Direccion General de Trafico) y reclama una multa de 60-300 EUR por exceso de velocidad o por no pasar la ITV. Enlace a dgt-multas-pago.es (real: sede.dgt.gob.es). Pide...
SMS suplantando a Correos, SEUR, MRW o GLS informa de un paquete retenido en aduanas y pide pagar 1,79-3,29 EUR. El enlace lleva a correos-aduana.es (real: correos.es). Roba datos de tarjeta y codigo...
Email o SMS imita a la Agencia Tributaria anunciando devolucion de IRPF de 137-587 EUR. El enlace lleva a agenciatributaria-devolucion.es (real: agenciatributaria.gob.es). Solicita DNI, IBAN, tarjeta...
SMS suplantando a Banco Santander, BBVA, CaixaBank o Sabadell informa de un 'movimiento inusual' de 750-2.500 EUR y pide pulsar un enlace para 'verificar la operacion'. El dominio es...
A fake site disguised as a GTA 6 fan countdown page is offering a "leaked copy" of the game for $50 or about 1 SOL. The moment the page loads, a crypto wallet drainer activates in the background....
Malwarebytes research shows that scammers no longer blast the same message everywhere. Instead, they match each scam type to the platform where it works best: toll scams arrive by email or SMS,...
Scammers are sticking their own QR code stickers over legitimate ones on parking meters, hoping drivers in a hurry will scan and pay. Instead of a real parking payment page, the fake QR code leads to...
Threat actors are running a phishing campaign that abuses the legitimate Faronics Deploy endpoint-management platform to enroll victim computers and push ConnectWise ScreenConnect, giving them...
Researchers at the SANS Internet Storm Center analyzed a phishing email whose link pointed to a credential-harvesting page built with heavily obfuscated JavaScript. The page was "polymorphic": each...
AI has turned open-source intelligence (OSINT) into an end-to-end fraud pipeline. Scammers can now automatically scrape your public social media posts, photos, videos, workplace, family ties and...
Job seekers on Indeed are being targeted by scammers posing as recruiters who instruct victims to install a fake "interview" Android app. The malicious APK impersonates the Indeed login page, then...
Scammers exploit every major weather emergency or natural disaster — hurricanes, floods in Nepal and Tibet, earthquakes in Venezuela, Japan, and Colombia — to set up fake charities and pocket money...
Cybercriminals are exploiting the GTA 6 hype by creating fake Rockstar Games websites that appear in Google search results for "GTA 6 demo" or "GTA 6 download." Clicking the "Play Now" or "Official...
Security researchers have uncovered AnonyMousKIT , a phishing-as-a-service (PhaaS) platform that automates the theft of iPhone unlock passcodes using AI-generated voice agents . The service targets...
Attackers are uploading malicious HTML files to public npm package mirrors, then sharing links that look like innocent Cloudflare CAPTCHA verification pages. Once the visitor clicks, the fake CAPTCHA...
Abre Mythos y pégalo. Triaje gratis en segundos. Dossier forense defendible desde CHF 29/mes cuando necesitas un rastro.